Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21.01.2018 Ran by PROFEN-DUZY (25-01-2018 14:12:24) Running from C:\Users\PROFEN-DUZY\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2009-01-13 10:44:03) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3249447549-3957856928-71672113-500 - Administrator - Disabled) Arkadiusz (S-1-5-21-3249447549-3957856928-71672113-1005 - Limited - Enabled) Guest (S-1-5-21-3249447549-3957856928-71672113-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-3249447549-3957856928-71672113-1002 - Limited - Enabled) PROFEN-DUZY (S-1-5-21-3249447549-3957856928-71672113-1000 - Administrator - Enabled) => C:\Users\PROFEN-DUZY ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ESET Smart Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70} AS: ESET Smart Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Zapora osobista ESET (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 2007 Microsoft Office system (HKLM\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation) 7-Zip 16.04 (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) Adobe Acrobat Reader DC - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated) Adobe Flash Player 28 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated) Adobe Illustrator CS6 (HKLM\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2018 (32 Bit) (HKLM\...\PHSP_19_0_32) (Version: 19.0 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0415-0000-0000000FF1CE}_PROHYBRIDR_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0415-0000-0000000FF1CE}_PROHYBRIDR_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0415-0000-0000000FF1CE}_PROHYBRIDR_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Allway Sync version 16.0.1 (HKLM\...\Allway Sync_is1) (Version: - Botkind Inc) AquaSnap 1.23.1 (HKLM\...\{7CA451E8-F64A-4E13-A3BF-993A0DA6869D}) (Version: 1.23.1 - Nurgo Software) aTube Catcher version 3.8 (HKLM\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp) Brother MFL-Pro Suite DCP-J552DW (HKLM\...\{7B4C83B6-17C1-4BFD-B86D-4D7AD4498CBB}) (Version: 1.0.4.0 - Brother Industries, Ltd.) CalDavSynchronizer (HKLM\...\{13BF170B-E7DA-4F0F-A556-B5C1AB07A656}) (Version: 2.18.0 - Gerhard Zehetbauer) CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform) ChomikBox (HKLM\...\{45B8131C-E239-4BE0-A92B-0E7FE1BBF83E}) (Version: 2.0.8.2 - Chomikuj.pl) DraftSight 2017 SP1 (HKLM\...\{C38864AF-B01A-427F-BBA4-7B5A65CE6FFB}) (Version: 17.1.0096 - Dassault Systemes) Encryptomatic Open PGP (HKLM\...\{D257628C-5632-4486-817C-E3D7D8D6D052}) (Version: 2.1.0 - Encryptomatic, LLC) ESET Smart Security (HKLM\...\{80D22ED8-E72F-4219-A1B0-077085F06F1D}) (Version: 10.1.210.2 - ESET, spol. s r.o.) Exif Pilot 5.0 (HKLM\...\Exif Pilot_is1) (Version: 5.0 - Two Pilots) f.lux (HKU\S-1-5-21-3249447549-3957856928-71672113-1000\...\Flux) (Version: - f.lux Software LLC) Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 9.0.1.1049 - Foxit Software Inc.) GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team) Google Chrome (HKLM\...\Google Chrome) (Version: 63.0.3239.132 - Google Inc.) Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Gpg4win (2.3.3) (HKLM\...\GPG4Win) (Version: 2.3.3 - The Gpg4win Project) HL-3170CDW (HKLM\...\{C6580DE1-F539-4700-ADD2-3185121E51A8}) (Version: 1.0.1.0 - Brother Industries, Ltd.) IrfanView 4.44 (32-bit) (HKLM\...\IrfanView) (Version: 4.44 - Irfan Skiljan) Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation) K-Lite Codec Pack 13.6.0 Standard (HKLM\...\KLiteCodecPack_is1) (Version: 13.6.0 - KLCP) LibreOffice 5.3.1.2 (HKLM\...\{6E0E33C7-0706-4174-BCF2-8E7343E7F311}) (Version: 5.3.1.2 - The Document Foundation) Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.60825 - Microsoft Corporation) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0.2.6549 - Mozilla) Mozilla Thunderbird 56.0 (x86 pl) (HKLM\...\Mozilla Thunderbird 56.0 (x86 pl)) (Version: 56.0 - Mozilla) NAPS2 5.4.0 (HKLM\...\NAPS2 (Not Another PDF Scanner 2)_is1) (Version: - Ben Olden-Cooligan) Notepad++ (32-bit x86) (HKLM\...\Notepad++) (Version: 7.4.1 - Notepad++ Team) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation) Paseczek 1.5.156.2732-beta (HKLM\...\Paseczek_is1) (Version: 1.5.156.2732-beta - Codeton Software) PDF Settings CS6 (HKLM\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden PVSonyDll (HKLM\...\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}) (Version: 1.00.0001 - NVIDIA Corporation) Hidden Setting Utility Series (HKLM\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.0.0.08060 - Sony Corporation) TeraCopy 3.0 (HKLM\...\TeraCopy_is1) (Version: - Code Sector) TIDAL (HKU\S-1-5-21-3249447549-3957856928-71672113-1000\...\TIDAL) (Version: 2.1.8 - TIDAL Music AS) Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 9.0a - Ghisler Software GmbH) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Uplay (HKLM\...\Uplay) (Version: 46.0 - Ubisoft) VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.1.12010 - Sony Corporation) VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{989ED050-E296-4FDC-9E4E-C48B4AF76E32}) (Version: 3.6.1.12010 - Sony Corporation) Hidden VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{B1991F22-4F93-4D11-9866-A7DFE551DF9E}) (Version: 3.6.1.12010 - Sony Corporation) Hidden VAIO Content Metadata Manager Settings (HKLM\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation) VAIO Content Metadata Manager Settings (HKLM\...\{18510937-0146-417B-95D8-14706649C384}) (Version: 3.6.0.09240 - Sony Corporation) Hidden VAIO Content Metadata XML Interface Library (HKLM\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation) VAIO Original Function Settings (HKLM\...\{7C404084-C5A6-42FF-B731-0BAC79A6E134}) (Version: 2.0.2.02240 - Sony Corporation) VAIO Original Function Settings (HKLM\...\{95229EF6-F4A1-413A-BA50-668311FAFE19}) (Version: 2.0.2.02240 - Sony Corporation) Hidden VAIO Presentation Support (HKLM\...\{2018C019-30D9-4240-8C01-0865C10DCF5A}) (Version: 2.0.0.05270 - Sony Corporation) Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9600 - Broadcom Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2017-05-14] () ContextMenuHandlers1: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-11-06] (ESET) ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files\GNU\GnuPG\gpgex.dll [2016-08-18] (g10 Code GmbH) ContextMenuHandlers1: [TeraCopy] -> {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} => C:\Program Files\TeraCopy\TeraCopyExt.dll [2016-12-07] () ContextMenuHandlers2: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-11-06] (ESET) ContextMenuHandlers2: [TeraCopy] -> {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} => C:\Program Files\TeraCopy\TeraCopyExt.dll [2016-12-07] () ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files\GNU\GnuPG\gpgex.dll [2016-08-18] (g10 Code GmbH) ContextMenuHandlers4: [TeraCopy] -> {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} => C:\Program Files\TeraCopy\TeraCopyExt.dll [2016-12-07] () ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2009-07-18] (NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers6: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-11-06] (ESET) ContextMenuHandlers6: [TeraCopy] -> {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} => C:\Program Files\TeraCopy\TeraCopyExt.dll [2016-12-07] () ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {11564C78-EDD3-4B03-969B-3B7D35C281F7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-13] (Piriform Ltd) Task: {2BEA4E59-9579-41F7-AF63-3FDED1A2CBF2} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-10-18] () Task: {3B8C6198-A57F-409D-8D75-9B4975FE576C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-01-13] (Google Inc.) Task: {3E2774BF-CEC8-4B40-9ED5-39937AC9D498} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_28_0_0_137_pepper.exe [2018-01-10] (Adobe Systems Incorporated) Task: {56D55254-BA24-4AEA-8ECD-F9F5E2FEC109} - System32\Tasks\AdobeAAMUpdater-1.0-PROFEN-DUZY-PC-PROFEN-DUZY => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated) Task: {5D43546B-D71E-4170-9CC0-B5935A33F29A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-01-13] (Google Inc.) Task: {6C0483F3-7127-4BDC-A9E5-6818145B997D} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-13] (Piriform Ltd) Task: {B5B62AFA-7A45-4516-8C0F-5616C4D638CF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe Task: {C5D9D98F-D963-4162-840A-2F95E18A2996} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-10] (Adobe Systems Incorporated) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\PROFEN-DUZY\Desktop\Rafał - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Default" ShortcutWithArgument: C:\Users\PROFEN-DUZY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Google Keep – notatki i listy.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki ShortcutWithArgument: C:\Users\PROFEN-DUZY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Ogólny - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" ==================== Loaded Modules (Whitelisted) ============== 2017-02-22 12:58 - 2016-05-26 14:10 - 000182784 _____ () C:\Program Files\Allway Sync\Bin\SyncService.exe 2016-08-18 09:27 - 2016-08-18 09:27 - 000216576 _____ () C:\Program Files\GNU\GnuPG\dirmngr.exe 2016-08-18 09:14 - 2016-08-18 09:14 - 000222720 _____ () C:\Program Files\GNU\GnuPG\libksba-8.dll 2016-08-18 09:09 - 2016-08-18 09:09 - 000103424 _____ () C:\Program Files\GNU\GnuPG\libgpg-error-0.dll 2016-08-18 09:03 - 2016-08-18 09:03 - 000050176 _____ () C:\Program Files\GNU\GnuPG\libw32pth-0.dll 2016-08-18 09:14 - 2016-08-18 09:14 - 000073728 _____ () C:\Program Files\GNU\GnuPG\libassuan-0.dll 2016-08-18 09:17 - 2016-08-18 09:17 - 000751104 _____ () C:\Program Files\GNU\GnuPG\libgcrypt-20.dll 2017-03-02 12:27 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll 2017-10-23 16:25 - 2017-10-23 16:25 - 000556728 _____ () C:\Program Files\AquaSnap\AquaSnap.Hook.dll 2017-12-13 19:04 - 2017-12-13 19:04 - 000084808 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:04 - 2009-06-10 22:39 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3249447549-3957856928-71672113-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\PROFEN-DUZY\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupreg: BrHelp => C:\Program Files\Brother\Brother Help\BrotherHelp.exe /AUTORUN MSCONFIG\startupreg: BrStsMon00 => C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN MSCONFIG\startupreg: ControlCenter4 => C:\Program Files\ControlCenter4\BrCcBoot.exe /autorun MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{53FA71E1-37AA-4DCB-AC23-DE782809B94B}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{6ACFF1B1-0628-439E-9556-AB25E79D5B4A}] => (Allow) LPort=54925 FirewallRules: [TCP Query User{18DB87D6-25EC-43F3-8014-25C606C7398A}C:\program files\paseczek\paseczek.exe] => (Allow) C:\program files\paseczek\paseczek.exe FirewallRules: [UDP Query User{AE0B4571-41BF-43F0-A9D7-722E25ACFA77}C:\program files\paseczek\paseczek.exe] => (Allow) C:\program files\paseczek\paseczek.exe FirewallRules: [TCP Query User{B717AADA-686B-4EEC-98D3-CFDA4AE9E3A6}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe FirewallRules: [UDP Query User{BCAF3FE5-24D8-46C5-875D-CA69428E011C}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe FirewallRules: [{6E23F953-B384-47C8-A8E5-A705ED31BC60}] => (Allow) C:\Users\PROFEN-DUZY\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{B736859A-3CFB-4B78-B83D-1828B8065DFE}] => (Allow) C:\Users\PROFEN-DUZY\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{FEA8870B-4F1F-4BFD-8C14-75D6D48C5283}] => (Allow) C:\Users\PROFEN-DUZY\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{4570E5B9-384E-45F8-A2BC-66996F8A34C8}] => (Allow) C:\Users\PROFEN-DUZY\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{4A9F2D1D-EBFF-419D-BC96-53E0F7DEB623}] => (Allow) C:\Users\PROFEN-DUZY\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{D4D60D7D-99C0-4B1B-88D4-1AF373FBAA1B}] => (Allow) C:\Users\PROFEN-DUZY\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{CA1F1E3F-8F39-4CE9-B526-E13CFB4094C7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 16-01-2018 13:29:05 Windows Update 23-01-2018 14:48:14 Windows Update 24-01-2018 10:05:09 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 24-01-2018 10:06:30 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 24-01-2018 10:07:29 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 24-01-2018 10:51:14 Installed Fresco Logic USB3.0 Host Controller 25-01-2018 11:58:53 Restore Operation ==================== Faulty Device Manager Devices ============= Name: Unknown Device Description: Unknown Device Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard USB Host Controller) Service: Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: Base System Device Description: Base System Device Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Unknown Device Description: Unknown Device Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard USB Host Controller) Service: Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Event log errors: ========================= Application errors: ================== Error: (01/25/2018 02:05:25 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/25/2018 02:03:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. System errors: ============= Error: (01/25/2018 02:05:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. Error: (01/25/2018 02:05:48 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. Error: (01/25/2018 02:02:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Error: (01/25/2018 02:02:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU P8700 @ 2.53GHz Percentage of memory in use: 49% Total physical RAM: 3039.06 MB Available physical RAM: 1541.43 MB Total Virtual: 6076.46 MB Available Virtual: 4427.25 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:292.97 GB) (Free:180.59 GB) NTFS Drive e: (Dane) (Fixed) (Total:154.94 GB) (Free:143.96 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4FD2B5A3) Partition 1: (Not Active) - (Size=17.8 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=154.9 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=293 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================